suse/kernel-livepatch-SLE15-SP3_Update_63&distro=SUSE Linux Enterprise Live Patching 15 SP3

Vulnerabilities (41)

• CVE-2023-53559HigOct 4, 2025
  affected < 1-150300.7.5.2fixed 1-150300.7.5.2

  In the Linux kernel, the following vulnerability has been resolved: ip_vti: fix potential slab-use-after-free in decode_session6 When ip_vti device is set to the qdisc of the sfb type, the cb field of the sent skb may be modified during enqueuing. Then, slab-use-after-free may

• CVE-2022-50504MedOct 4, 2025
  affected < 1-150300.7.5.2fixed 1-150300.7.5.2

  In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: avoid scheduling in rtas_os_term() It's unsafe to use rtas_busy_delay() to handle a busy status from the ibm,os-term RTAS function in rtas_os_term(): Kernel panic - not syncing: Attempted to kill

• CVE-2022-50496HigOct 4, 2025
  affected < 1-150300.7.5.2fixed 1-150300.7.5.2

  In the Linux kernel, the following vulnerability has been resolved: dm cache: Fix UAF in destroy() Dm_cache also has the same UAF problem when dm_resume() and dm_destroy() are concurrent. Therefore, cancelling timer again in destroy().

• CVE-2022-50494MedOct 4, 2025
  affected < 1-150300.7.5.2fixed 1-150300.7.5.2

  In the Linux kernel, the following vulnerability has been resolved: thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash When CPU 0 is offline and intel_powerclamp is used to inject idle, it generates kernel BUG: BUG: using smp_processor_id() i

• CVE-2022-50493HigOct 4, 2025
  affected < 1-150300.7.5.2fixed 1-150300.7.5.2

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix crash when I/O abort times out While performing CPU hotplug, a crash with the following stack was seen: Call Trace: qla24xx_process_response_queue+0x42a/0x970 [qla2xxx] qla2x00_sta

• CVE-2022-50489MedOct 4, 2025
  affected < 1-150300.7.5.2fixed 1-150300.7.5.2

  In the Linux kernel, the following vulnerability has been resolved: drm/mipi-dsi: Detach devices when removing the host Whenever the MIPI-DSI host is unregistered, the code of mipi_dsi_host_unregister() loops over every device currently found on that bus and will unregister it.

• CVE-2022-50488HigOct 4, 2025
  affected < 1-150300.7.5.2fixed 1-150300.7.5.2

  In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix possible uaf for 'bfqq->bic' Our test report a uaf for 'bfqq->bic' in 5.10: ================================================================== BUG: KASAN: use-after-free in bfq_select_queue+0x3

• CVE-2022-50484MedOct 4, 2025
  affected < 1-150300.7.5.2fixed 1-150300.7.5.2

  In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential memory leaks When the driver hits -ENOMEM at allocating a URB or a buffer, it aborts and goes to the error path that releases the all previously allocated resources. However, whe

• CVE-2022-50480MedOct 4, 2025
  affected < 1-150300.7.5.2fixed 1-150300.7.5.2

  In the Linux kernel, the following vulnerability has been resolved: memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() The break of for_each_available_child_of_node() needs a corresponding of_node_put() when the reference 'child' is not used anymore. Here we do not n

• CVE-2022-50470HigOct 4, 2025
  affected < 1-150300.7.5.2fixed 1-150300.7.5.2

  In the Linux kernel, the following vulnerability has been resolved: xhci: Remove device endpoints from bandwidth list when freeing the device Endpoints are normally deleted from the bandwidth list when they are dropped, before the virt device is freed. If xHC host is dying or

• CVE-2023-53500HigOct 1, 2025
  affected < 1-150300.7.5.2fixed 1-150300.7.5.2

  In the Linux kernel, the following vulnerability has been resolved: xfrm: fix slab-use-after-free in decode_session6 When the xfrm device is set to the qdisc of the sfb type, the cb field of the sent skb may be modified during enqueuing. Then, slab-use-after-free may occur when

• CVE-2022-50432HigOct 1, 2025
  affected < 1-150300.7.5.2fixed 1-150300.7.5.2

  In the Linux kernel, the following vulnerability has been resolved: kernfs: fix use-after-free in __kernfs_remove Syzkaller managed to trigger concurrent calls to kernfs_remove_by_name_ns() for the same file resulting in a KASAN detected use-after-free. The race occurs when the

• CVE-2022-50423HigOct 1, 2025
  affected < 1-150300.7.5.2fixed 1-150300.7.5.2

  In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() There is an use-after-free reported by KASAN: BUG: KASAN: use-after-free in acpi_ut_remove_reference+0x3b/0x82 Read of size 1 at addr ffff8

• CVE-2023-53395HigSep 18, 2025
  affected < 1-150300.7.5.2fixed 1-150300.7.5.2

  In the Linux kernel, the following vulnerability has been resolved: ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer ACPICA commit 90310989a0790032f5a0140741ff09b545af4bc5 According to the ACPI specification 19.6.134, no argument is required to be passed for ASL Timer instruct

• CVE-2022-50388MedSep 18, 2025
  affected < 1-150300.7.5.2fixed 1-150300.7.5.2

  In the Linux kernel, the following vulnerability has been resolved: nvme: fix multipath crash caused by flush request when blktrace is enabled The flush request initialized by blk_kick_flush has NULL bio, and it may be dealt with nvme_end_req during io completion. When blktrace

• CVE-2023-53365MedSep 17, 2025
  affected < 1-150300.7.5.2fixed 1-150300.7.5.2

  In the Linux kernel, the following vulnerability has been resolved: ip6mr: Fix skb_under_panic in ip6mr_cache_report() skbuff: skb_under_panic: text:ffffffff88771f69 len:56 put:-4 head:ffff88805f86a800 data:ffff887f5f86a850 tail:0x88 end:0x2c0 dev:pim6reg ------------[ cut he

• CVE-2023-53282HigSep 16, 2025
  affected < 1-150300.7.5.2fixed 1-150300.7.5.2

  In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write During the sysfs firmware write process, a use-after-free read warning is logged from the lpfc_wr_object() routine: BUG: KFENCE: us

• CVE-2022-50334MedSep 15, 2025
  affected < 1-150300.7.5.2fixed 1-150300.7.5.2

  In the Linux kernel, the following vulnerability has been resolved: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() Syzkaller reports a null-ptr-deref bug as follows: ====================================================== KASAN: null-ptr-deref in range [0x0000000000000

• CVE-2022-50327MedSep 15, 2025
  affected < 1-150300.7.5.2fixed 1-150300.7.5.2

  In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value The return value of acpi_fetch_acpi_dev() could be NULL, which would cause a NULL pointer dereference to occur in acpi_device_hid(). [ rjw: Subje

• CVE-2025-38476CriJul 28, 2025
  affected < 1-150300.7.5.2fixed 1-150300.7.5.2

  In the Linux kernel, the following vulnerability has been resolved: rpl: Fix use-after-free in rpl_do_srh_inline(). Running lwt_dst_cache_ref_loop.sh in selftest with KASAN triggers the splat below [0]. rpl_do_srh_inline() fetches ipv6_hdr(skb) and accesses it after skb_cow_he